Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/1BBD8C580BE911F187777A73343D8C67.roa
File:                     1BBD8C580BE911F187777A73343D8C67.roa (raw, json)
Hash identifier:          Khg9wPRObvvayQcBytp6PWB4psgr/LeDDZkUxOQ62uU=
Subject key identifier:   54:31:5E:26:BE:41:94:C9:83:5D:B4:C4:CF:7F:8F:F5:A1:C4:F7:BF
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05D5
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/1BBD8C580BE911F187777A73343D8C67.roa
Signing time:             Sun 01 Mar 2026 18:52:09 +0000
ROA not before:           Tue 17 Feb 2026 11:00:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154500
IP address blocks:        151.158.166.0/23 maxlen: 23
                          151.158.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Feb 17 11:00:13 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48ad9-8e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:c4:64:35:10:ac:01:d9:98:1e:ef:97:dc:
                    01:06:cb:13:a1:27:95:e6:9f:55:14:2b:e4:fc:4d:
                    14:23:fa:bf:ce:7b:27:df:ff:2c:44:1c:31:b2:d8:
                    bb:ab:64:aa:4d:c4:7c:bc:40:b2:2f:26:e7:c5:35:
                    fb:16:07:ac:4a:42:07:65:0a:33:28:11:c8:84:20:
                    56:73:12:1f:3c:d2:6b:c8:56:8f:c1:8f:f6:2f:a3:
                    3c:00:5c:1a:42:bf:b7:46:0b:00:85:eb:cc:40:8a:
                    84:85:ee:c6:24:01:16:0c:80:9a:90:6b:79:33:5f:
                    c1:dc:87:c4:42:84:44:e3:82:7c:65:3e:ab:83:2b:
                    5a:25:be:b6:b9:a0:7b:42:da:a3:6e:f8:74:44:86:
                    39:a6:f0:67:c3:db:9a:7f:55:ca:f0:c2:39:f7:9c:
                    87:06:58:79:06:7a:e4:12:71:41:ed:98:c0:e4:ff:
                    2e:f3:f6:2b:57:c3:de:03:8e:e0:8d:21:e6:6b:0a:
                    a1:30:48:1e:58:ce:89:ed:15:f7:73:5a:b0:4b:5d:
                    ec:e9:1a:fa:57:14:3c:08:75:a6:b2:ed:88:cd:44:
                    3c:84:67:27:5e:ba:f2:15:bd:c6:5d:70:9d:35:0a:
                    cc:c0:b2:3c:92:22:d3:f1:d6:40:ec:d0:14:77:19:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:31:5E:26:BE:41:94:C9:83:5D:B4:C4:CF:7F:8F:F5:A1:C4:F7:BF
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/1BBD8C580BE911F187777A73343D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:16:e3:b0:80:d3:d7:ce:5a:99:c7:6b:a3:e5:f7:9b:a0:67:
         2c:b8:a1:90:4f:61:c1:91:a4:64:40:99:30:0a:66:fc:ed:6f:
         1f:d0:29:ef:3e:a9:de:f1:ae:e7:c9:8c:66:29:6a:64:2a:f5:
         96:a7:ad:0c:72:b9:90:83:36:91:94:29:30:ac:57:4d:a2:59:
         a6:38:0f:c7:76:f1:d9:30:df:8d:07:07:3e:02:24:8d:ed:80:
         7d:82:23:2e:d6:2d:98:d3:d6:ff:5e:6c:69:d5:38:a4:81:d9:
         e7:56:a4:62:18:7b:e2:bb:6b:62:72:d5:4c:e2:72:f3:c9:7c:
         5d:89:e7:1f:ac:74:dd:75:cd:60:53:a6:83:7a:92:4c:c5:ec:
         78:9a:23:1a:65:b3:07:39:3d:f6:69:cd:30:22:ac:55:be:8c:
         6a:79:d5:c9:1b:9e:46:75:a2:d0:5c:6d:41:ad:1c:c6:f7:08:
         22:c8:e3:f8:75:29:f0:69:9b:37:a2:85:13:18:93:90:b8:85:
         49:67:6b:04:bf:4a:4f:65:27:66:bb:e0:a1:fd:05:dc:ad:c1:
         c5:26:7c:d6:1d:bc:40:41:6a:87:96:5e:57:38:e6:ea:6c:17:
         1a:29:44:22:ce:69:f2:f7:68:88:05:7d:6d:02:e7:b4:93:41:
         6f:58:05:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:49:51 2026 by rpki-client